CVE-2003-1385

ipchat.php in Invision Power Board 1.1.1 allows remote attackers to execute arbitrary PHP code, if registerglobals is enabled, by modifying the rootpath parameter to reference a URL on a remote web server that contains the code...

Linux Kernel <= 2.4.21 MXCSR Local DOS Exploitation

As I mentioned in my previous post to the list, I've been looking into x87 FPU stuff lately. While I was tinkering I ran into the MXCSR register, which reminded me of an old RedHat advisory with a vague description of a kernel vuln relating to the register. I don't recall anyone ever discussing...

Remote overflow in thttpd

----------------------------------------------------------------------- Texonet Security Advisory 20030908 ----------------------------------------------------------------------- Advisory ID : TEXONET-20030908 Authors : Joel Soderberg and Christer Oberg Issue date : Monday, September 8, 2003...

[EXPL] Oracle Command Line Overflow (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

pMachine.txt

Informations : °°°°°°°°°°°°° Language : PHP Version : Free 2.2.1 Website : http://www.pmachine.com Problem : Include Security Hole PHP Code/Location : °°°°°°°°°°°°°°°°°°° This will work if registerglobals is ON OR OFF. /pm/lib.inc.php : ------------------------------------------------------------...

Truegalerie admin.php loggedin Parameter Admin Authentication Bypass

The remote host is running TrueGalerie, an album management system written in PHP. There is a flaw in the version of TrueGalerie that could allow an attacker to log in as the administrator without having to know the password, simply by requesting the URL : /admin.php?loggedin=1 Provided PHP's...

CVE-2002-1409

ptrace on HP-UX 11.00 through 11.11 allows local users to cause a denial of service data page fault panic via "an incorrect reference to thread register state."...

Two Invision Power Board 1.1.x vulns

Hola, Invision Power Services have continued to show their amazing support and understanding for the security community by release two patches for their 'Invision Power Board' product now one of the most widely used 'Board' programs around. Without sending out any security mailing list...

CVE-2001-1370

prepend.php3 in PHPLib before 7.2d, when registerglobals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $PHPLIBlibdir to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages...

CVE-2002-1409

ptrace on HP-UX 11.00 through 11.11 allows local users to cause a denial of service data page fault panic via "an incorrect reference to thread register state."...

myphpPageTool /doc/admin/index.php ptinclude Parameter Remote File Inclusion

The remote web server appears to be hosting myphpPageTool. The installed version fails to properly sanitize user-supplied input to the 'ptinclude' parameter of the '/doc/admin/index.php' script. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the...

CVE-2002-1571

The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on processors that do not clear all relevant SSE registers...

CVE-2001-1370

prepend.php3 in PHPLib before 7.2d, when registerglobals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $PHPLIBlibdir to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages...